ASD ISM 1115 Ensure cables use conduits in walls
What it says
Cables from cable trays to wall outlet boxes are run in flexible or plastic conduit.
Quoted as published. Everything else on this page is written by Control Stack.
What it means
In plain EnglishEnsures cables in walls are protected by running through flexible or plastic conduits.
This control is about making sure cables that run through your walls are protected by being inside a flexible or plastic tube called a conduit. This matters because if the cables are not protected, they can be easily damaged by things like moisture or pests, leading to breakdowns in your internet or phone systems, which can disrupt your business operations.
Free. Save your status, tasks and notes.
Why it matters
Unprotected cables risk damage from pests or moisture, causing intermittent connectivity, hardware failures and service disruptions impacting business continuity.
How to implement
Building managers should arrange for all in-wall cables to be rerouted through conduits.
Contact a professional electrician or cabling specialist to inspect your current setup and install conduits if they are missing.
IT managers should review plans for any new building works that involve wiring.
Work with contractors to specify that cables must be run through flexible or plastic conduits according to the building codes and safety standards.
Facility maintenance staff should regularly check that conduits are intact and secure.
Schedule periodic inspections to look for broken or cracked conduits, and organise repairs immediately if any are found.
Office managers should ensure cables are labelled and documented.
Create a simple map of where major cables are routed in the walls and ensure they follow conduit paths, which helps in quickly identifying and fixing issues.
Procurement should source electrical services that guarantee conduit installation.
When hiring electricians or IT infrastructure services, clearly specify in contracts that all in-wall cabling must be enclosed in conduits.
Keep it running
Regularly inspect wall conduits and tray-to-outlet runs for cracks, gaps and wear, and promptly replace damaged flexible/plastic conduit to prevent cable exposure.
Evidence and audit
- Check 1 of 5What an auditor asks for
Ask for
A floor plan with conduit specifications. Ensure it lists all wall-cabling areas and specifies conduit use.
Look at
Detailed notes indicating whether conduits are installed.
Good evidence
Is a plan showing all relevant electrical paths protected by conduits.
- Check 2 of 5What an auditor asks for
Look at
Completed records showing routine inspection dates and any repairs conducted.
Good evidence
Shows a regular inspection schedule and resolved issues on time.
- Check 3 of 5What an auditor asks for
Ask for
Contracts with IT or electrical service providers. Ensure they include clauses specifying conduit installation and maintenance.
Good evidence
Has explicit terms about conduit use as part of the service agreement.
- Check 4 of 5What an auditor asks for
Good evidence
Result is a work order that shows installation specifics and follow-up after audit findings.
- Check 5 of 5What an auditor asks for
Ask for
Training records for maintenance staff on identifying conduit issues.
Look at
Attendance records for training sessions on cable safety and conduit inspection.
Good evidence
Is detailed records showing ongoing staff training.
Mappings
Closest match in ISO/IEC 27001: A.7.12, Secure cabling for power and data, which this control partially meets.
ISO/IEC 27001: 1 mapping
This control partially meets A.7.12.
Annex A 7.12 requires organisations to protect power and data cabling from interception, interference, and damage across their environments. ISM-1115 specifies a particular protective method by requiring cables from cable trays to wall outlet boxes to be run in flexible or plastic conduit, reducing physical access and accidental damage. ISM-1115 is an implementation-level subset of Annex A 7.12 and does not cover all cabling routes or other protections (e.g. monitoring, restricted spaces).
Mappings show how controls relate across frameworks. They do not imply full equivalence or certification.




